Contents
About this report
Report parameters
Contexts
No contexts were selected, so all contexts were included by default.
Sites
The following sites were included:
- https://update.googleapis.com
- https://optimizationguide-pa.googleapis.com
- https://content-autofill.googleapis.com
- http://localhost:8080
- https://accounts.google.com
(If no sites were selected, all sites were included by default.)
An included site must also be within one of the included contexts for its data to be included in the report.
Risk levels
Included: Alto, Médio, Baixo, Informational
Excluded: None
Confidence levels
Included: User Confirmed, Alto, Médio, Baixo
Excluded: User Confirmed, Alto, Médio, Baixo, Falso Positivo
Summaries
Alert counts by risk and confidence
| Confidence | ||||||
|---|---|---|---|---|---|---|
| User Confirmed | Alto | Médio | Baixo | Total | ||
| Risk | Alto | 0 (0,0%) |
0 (0,0%) |
0 (0,0%) |
1 (6,2%) |
1 (6,2%) |
| Médio | 0 (0,0%) |
5 (31,2%) |
1 (6,2%) |
1 (6,2%) |
7 (43,8%) |
|
| Baixo | 0 (0,0%) |
1 (6,2%) |
2 (12,5%) |
1 (6,2%) |
4 (25,0%) |
|
| Informational | 0 (0,0%) |
0 (0,0%) |
2 (12,5%) |
2 (12,5%) |
4 (25,0%) |
|
| Total | 0 (0,0%) |
6 (37,5%) |
5 (31,2%) |
5 (31,2%) |
16 (100%) |
|
Alert counts by site and risk
| Risk | |||||
|---|---|---|---|---|---|
|
Alto (= Alto) |
Médio (>= Médio) |
Baixo (>= Baixo) |
Informational (>= Informational) |
||
| Site | https://optimizationguide-pa.googleapis.com | 0 (0) |
2 (2) |
2 (4) |
0 (4) |
| https://content-autofill.googleapis.com | 0 (0) |
0 (0) |
1 (1) |
1 (2) |
|
| http://localhost:8080 | 1 (1) |
5 (6) |
1 (7) |
3 (10) |
|
Alert counts by alert type
| Alert type | Risk | Count |
|---|---|---|
| Cloud Metadata Potentially Exposed | Alto | 1 (6,2%) |
| Absence of Anti-CSRF Tokens | Médio | 6 (37,5%) |
| CSP: Wildcard Directive | Médio | 1 (6,2%) |
| CSP: script-src unsafe-eval | Médio | 1 (6,2%) |
| CSP: script-src unsafe-inline | Médio | 1 (6,2%) |
| CSP: style-src unsafe-inline | Médio | 1 (6,2%) |
| Content Security Policy (CSP) Header Not Set | Médio | 5 (31,2%) |
| Missing Anti-clickjacking Header | Médio | 5 (31,2%) |
| Information Disclosure - Debug Error Messages | Baixo | 1 (6,2%) |
| Strict-Transport-Security Header Not Set | Baixo | 13 (81,2%) |
| Timestamp Disclosure - Unix | Baixo | 3 (18,8%) |
| X-Content-Type-Options Header Missing | Baixo | 5 (31,2%) |
| Content-Type Header Missing | Informational | 2 (12,5%) |
| Information Disclosure - Suspicious Comments | Informational | 12 (75,0%) |
| Modern Web Application | Informational | 1 (6,2%) |
| Re-examine Cache-control Directives | Informational | 10 (62,5%) |
| Total | 16 |
Alerts
-
Risk=Alto, Confidence=Baixo (1)
-
http://localhost:8080 (1)
-
Cloud Metadata Potentially Exposed (1)
GET http://localhost:8080/latest/meta-data/
Alert tags Alert description The Cloud Metadata Attack attempts to abuse a misconfigured NGINX server in order to access the instance metadata maintained by cloud service providers such as AWS, GCP and Azure.
All of these providers provide metadata via an internal unroutable IP address '169.254.169.254' - this can be exposed by incorrectly configured NGINX servers and accessed by using this IP address in the Host header field.
Other info Based on the successful response status code cloud metadata may have been returned in the response. Check the response data to see if any cloud metadata has been returned.
The meta data returned can include information that would allow an attacker to completely compromise the system.
Request Request line and header section (687 bytes)
GET http://localhost:8080/latest/meta-data/ HTTP/1.1 Host: 169.254.169.254 Proxy-Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Language: pt-PT,pt;q=0.9,en-US;q=0.8,en;q=0.7Request body (0 bytes)
Response Status line and header section (853 bytes)
HTTP/1.1 200 OK Cache-Control: no-store X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Accept-Ranges: bytes Content-Security-Policy: default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data: Date: Mon, 05 Jun 2023 15:11:53 GMT Connection: keep-alive Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Last-Modified: Sat, 03 Jun 2023 09:15:05 GMT X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Content-Type: text/html Content-Length: 5894 Content-Language: pt-PTResponse body (5894 bytes)
<!DOCTYPE html> <html class="no-js" lang="en" dir="ltr"> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title>Trebol</title> <meta name="description" content="Description for Trebol" /> <meta name="google" content="notranslate" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta name="theme-color" content="#000000" /> <link rel="icon" href="favicon.ico" /> <link rel="manifest" href="manifest.webapp" /> <link rel="stylesheet" href="content/css/loading.css" /> <!-- jhipster-needle-add-resources-to-root - JHipster will add new resources here --> <base href="/"></head> <body> <!--[if lt IE 9]> <p class="browserupgrade"> You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience. </p> <![endif]--> <div id="root"> <div class="app-loading"> <div class="lds-pacman"> <div> <div></div> <div></div> <div></div> </div> <div> <div></div> <div></div> <div></div> </div> </div> </div> <div class="app-loading"> <div id="jhipster-error" style="display: none"> <!-- This content is for troubleshooting purpose and will be removed when app renders --> <h1>An error has occurred :-(</h1> <h2>Usual error causes</h2> <ol> <li> You started the application from an IDE and you didn't run <code style="color: red">npm start</code> or <code style="color: red">npm run webapp:build</code>. </li> <li> You had a network error while running <code style="color: red">npm install</code>. If you are behind a corporate proxy, it is likely that this error was caused by your proxy. Have a look at the JHipster error logs, you will probably have the cause of the error. </li> <li> You installed a Node.js version that doesn't work with JHipster: please use an LTS (long-term support) version, as it's the only version we support. </li> </ol> <h2>Building the client side code again</h2> <p>If you want to go fast, run <code style="color: red">./mvnw</code> to build and run everything.</p> <p>If you want to have more control, so you can debug your issue more easily, you should follow the following steps:</p> <ol> <li>Install npm dependencies with the command <code style="color: red">npm install</code></li> <li> Build the client with the command <code style="color: red">npm run webapp:build</code> or <code style="color: red">npm start</code> </li> <li>Start the server with <code style="color: red">./mvnw</code> or using your IDE</li> </ol> <h2>Getting more help</h2> <h3>If you have a question on how to use JHipster</h3> <p> Go to Stack Overflow with the <a href="http://stackoverflow.com/tags/jhipster" target="_blank" rel="noopener noreferrer">"jhipster"</a> tag. </p> <h3>If you have a bug or a feature request</h3> <p> First read our <a href="https://github.com/jhipster/generator-jhipster/blob/main/CONTRIBUTING.md" target="_blank" rel="noopener noreferrer" >contributing guidelines</a >. </p> <p> Then, fill a ticket on our <a href="https://github.com/jhipster/generator-jhipster/issues/new/choose" target="_blank" rel="noopener noreferrer" >bug tracker</a >, we'll be happy to resolve your issue! </p> <h3>If you want to chat with contributors and other users</h3> <p> Join our chat room on <a href="https://gitter.im/jhipster/generator-jhipster" target="_blank" rel="noopener noreferrer">Gitter.im</a>. Please note that this is a public chat room, and that we expect you to respect other people and write in a correct English language! </p> <!-- end of troubleshooting content --> </div> </div> </div> <noscript> <h1>You must enable JavaScript to view this page.</h1> </noscript> <script type="text/javascript"> // show an error message if the app loading takes more than 4 sec window.onload = function () { setTimeout(showError, 4000); }; function showError() { var errorElm = document.getElementById('jhipster-error'); if (errorElm && errorElm.style) { errorElm.style.display = 'block'; } } </script> <!-- uncomment this for adding service worker <script> if ('serviceWorker' in navigator) { window.addEventListener('load', function() { navigator.serviceWorker.register('/service-worker.js') .then(function () { console.log('Service Worker Registered'); }); }); } </script> --> <!-- Google Analytics: uncomment and change UA-XXXXX-X to be your site's ID. <script> (function(b,o,i,l,e,r){b.GoogleAnalyticsObject=l;b[l]||(b[l]= function(){(b[l].q=b[l].q||[]).push(arguments)});b[l].l=+new Date; e=o.createElement(i);r=o.getElementsByTagName(i)[0]; e.src='//www.google-analytics.com/analytics.js'; r.parentNode.insertBefore(e,r)}(window,document,'script','ga')); ga('create','UA-XXXXX-X');ga('send','pageview'); </script>--> <script defer src="main.d1626124.js"></script></body> </html>Attack 169.254.169.254Solution Do not trust any user data in NGINX configs. In this case it is probably the use of the $host variable which is set from the 'Host' header and can be controlled by an attacker.
-
-
-
Risk=Médio, Confidence=Alto (5)
-
https://optimizationguide-pa.googleapis.com (1)
-
Content Security Policy (CSP) Header Not Set (1)
GET https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LANGUAGE_DETECTION
Alert tags Alert description Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
Request Request line and header section (506 bytes)
GET https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LANGUAGE_DETECTION HTTP/1.1 Host: optimizationguide-pa.googleapis.com Connection: keep-alive X-Goog-Api-Key: AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Language: pt-PT,pt;q=0.9,en-US;q=0.8,en;q=0.7Request body (0 bytes)
Response Status line and header section (447 bytes)
HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdt2P2wKc8yROFyVmjYahlW-BbjwsRrA5bBdOeBxvGH9EYn_M78bkveAVsCf75bu_3U35kfY8KLx9DgaNIDtdWONLw Date: Mon, 05 Jun 2023 14:52:52 GMT Expires: Tue, 06 Jun 2023 14:52:52 GMT Vary: X-Goog-Api-Key Cache-Control: public, max-age=86400 X-Goog-Hash: crc32c=1IKXVw== Content-Length: 265059 Server: UploadServer Content-Type: text/html; charset=UTF-8 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Response body (265059 bytes)
Cr24 E � �0�"0 *�H�� � 0� � �:2�W�))���I��5_U(I7nzԂ��2[�;�H�ǦS��٨/���nb%Yx�6�]i�����u���PDF�iLJK�?��l����R��|���j�C �j!%'�s��[�"� �Gy� �=l).�=�l\���4蠕�Q!$e�=���C�1�%d��B�ݖK�[�l,�����7�� �y�$7J�G&TT��W�-=jgs[���&�@/гj$���+��yk|l^��Km)\Yx��}OCXf�� ��A5s7�8�o����L�(p[��^e�Ȃ���㟪?&X� :~,�)��C�nʯ��Hh�����<�N�0.����woa6��'&y����tHƔ�*7@�a�t�����F�YQU�����<�����m!.^�#f�'F"��lt�97U3f��WM˦�]Lw���)�x��)��Hy Z���l�a�)J~'�y�o�NS�#�,6D�9UMW�l> pa�WG䍇^�L,��B���"p�Y� ĸ��<��� �u����]�Q��=��c��*�{i��'!\�D����H=��1NI��F�!�,����j\� ��8�C�����V_]-�G�Q�SAЂ�f�.썸�E�4t ��~��u�ӢF�vY�9��j��}Ib������Wv!b�C�+왧��d�Oٮ���������Q���υ�x}VA�$�8�����<��t m�7�V'�%I��r�A��[�L�.m���G@$Č%�o t�^���_�i�+3|(�� �LHz$l�Q��su�t͜.}�WߊgC�jqޑu�7�?�)]�f�3�̋}���&�����ְ==r�����4�� ��RY�pt5���8i$�.<���I���;�U_�� ӹZ�**:J���-�<Bޱ �z�|*�7!҄��Ito�;���tà��>5��ek �I3@~̔%M������d@uh�������U��=�����5���h�o�@w�~�����,_��Ҕ �:�>� 1ȭ<J��˱m�f�WhǑ�� 0xE:?�Җ*��PK =0tV model-info.pb�`8���6%F&F PK>v�� PK =0tV model.tflite|�}�%�u6rH��a�! �cD��� '�`���%�tm�w�U��@ܮ{o��Fbv�{�W��N�{���aq^U�Y�Aĝ�׳t��~QH G$E'@ ;4a%�!$P������\n�{���=�s���cw������ܟ�s����;����ȝ?t��o�~s�οE?��}���?>|������3�������~��~��?�8�����������+�/�����_�|�_��?A��*}6��W���;�����7�Ƈ�|��y���������?���������Н��~ޥ���Ϗ���#������s�����m��{���ه��-�y�~�������G���;���7���[��݃�����~�S~By������h��mJ��O�������'�O��wn�>�z�O����?L�����~�ܮ�~��?�3���O��ş�����;w��2*:��0�{ru�>xg�I�����m�[k��!�ѻ�������1.zmT��C���`��?���&��4���]Fo1�֠�G�����䢶�{�����[�����������WFg�.u4ZYՇ��3����]�yykS�q��� _h艭�~茉�*����K�9*��"ѻ������2Z�f��>�"���NG�b���}�n~^ZWK7a��_��1v�u��I�'��s��C�%���Dz.�=X�=]�nKӝк��)�֛��3f�)�h�zzG�w�ޫܦ�jh�im�5��[������j��*!�>zo�|�r�=1����X�iձCGר:Sf�v��/�g���/�%D��&��Mz��/����T�3.%�~����}�?gh����7�Cb9��ݨ�fЛ���'�.K�:>D����y��Jޖo��5������������r�B;5\6��xt��孡K4R������'ֆ$o�w��B�p�[z�%��e��k�I���W��Ĵ�>Dڶ�mP1��� �/h��Oxp�Zj<��/_^�|ɣ[鹅>����?���j� ��;�n��y�g���>;��f�H��I,�?�H��@R;�O�Ʌ%��<�1r��OKg��ؗԛ,i�I Y���=i|e�� �"Ոx�@;Rӣ�v �ֹ��3���y�Ĥ-���N�24&�a�����E�ϫJ���sxn�����i;�"�mX?�q�i�|�����{�>u���6�7��>�v����2�L�d@��1X2h�ʕ]��,k�[�H{�����"{B��˝����$6qc��kO�~����9����vԆ��2�k�g�廏jRݷ��]��w�O��K���6{~r�g9~�s�����Ѻ�l�-k�2QL �sh�!���5�6�&�,ݍQC�]�Wz��Lz�����.��VoKlHM�)�ֆ�>���-�{;u���hc7~�<�}I~������Á\ep��Jҵ���g!Ϭ��f��7�m{E댧ԸO�H^Wa�?$���g?�&4�z&��u�000�ǠKgNGl*h}V�7���������>���l_Ȯ��ZM� ��m߇�.l-��u����/�.o����N�u7�m�v���A����p��I�BbB����h�$I��O����hh���>���w|m��;x ��/3N�h£���~C��Y��*k�ycŋGz��$Gn���� !��b�BY� &��>n�}݂k,k����� %�9�vF�w�[zN������j���Cj_�t���&�-�+�U�O(&�z�q-o��������]ݑ��0?�Ϥ�5J�̞��wx%�_�.�){�K�S|��!+��JB~.iO�Q�ѺXڇ�����*��%��ȳ�����J\�E.�J�=�o������ϲ�ﰎ���Aѡ(�UU�w�s�?}��U}����R��ߺ���׳�5�/�+��QaC�N�E��v�#��C��34~�:D�k����X��6z�i��H�� 4{DқD+����#ZKV "�q���z���O=� ��K-a+�l����A]�u��{dy��}LdJ�G,�-��Խңйш{���b|=e�z<����We{R�TR8ڸDR@�WL�a��V�����^�ھ.��gt�5}t���[,���iAF�>�s�=�&���ف��$�ck�Jn��E��� ��G��5] � �g�\�Q\������Ⱥ$ f<���Y�[ȴ���[G���h��k��!9�������r��>=�֯��ׯ�F��eF�&��CN�C�V�i?�����E�\A�5k�o�~}��G?���ցTګ �# e*�"�U�%���v����@���Ⱦ��G�Kr�}%�˿��H��Ԑ�`� !}�Ԉ;f=�>n�c��������ׯ?�`]H;��{�!���n�����gg�Md�He�[����� �p� ���� }ejv��Z"�ݲ���[��^��>u}H����� ��&�Z��[�+���#fb���'�t�;K��l_4�z�5������|������ez�o&;%�B�sZB ���P���@�Ir�l�����e�o��\!���d�'�M����J"����r�A�دeV��?�"-�׃ޑ��·�.��Fɱ�� wK��Eȱ<��JؙE�3���CWҪ���S�ey0��P�� i�r�@��jv7B��H�J�M:��|iȢ�� �|[bQ�f`F�c4��[����r��}[��J&4�K�}.��� U��i۶���+����S^�o���O��3z���=���a�f��7�p���e�8]�RO1�Yݨ�IS�HJ#���e��6ϬZ�`;o��GMq��Nt�-,_�{h���N��)~OY�x�+!�ƶ@����;%�8JzL�S �|���ʕ�U�麦����� d�t�-��|����F��A0:�1����I@�*�1���ٞ��o-�g���q/p.��@˺H��ߓ��H7t�Z�)�׃4�� �ȏT��"�tvZ���SkK�*��-�ɳ��x����G�����X�Sl�|�^Rޕ1@p�� �b��#���K dOș�z���^៰1f�7���7#���1`���`�T^����z��%;v*��, �;�Y�툳�"��ߺ,�w?���F�#�G�*�s��I;�/=��:BO�!V� yy�Nt{�-�m��=sng8�p]�@��N��F���&�P"@��@���>��8~���������Y�kޟ�$����k����~����"U��gG�|������&�B�9�K�sR,���xk�}�� >�=�e��1"a�Ϸ���3�6�7�|_����MM�����0�_'Y�S�lc��_�W�u�l���.��H�=$9�>����gH"�3$O���V*��V6QR�W��t�-2��l�Mo8)�'�D���q��e4'��jΫ�Q2m��@m��7����r!X �C�]�,��+��d\�i�G�E@�֘���\54zI$��"! '�$�Kˎ�F(�|@$uFoPm��n}/q#�%���)�Mh�H C�&�AV*���tD)ǹ �q^F� '�P;4�_כ�QO>q�S���.���� ��}�������3?]���t�=f�V�r���dR����(���_9�����4�o�K���� +{}���q�$�������6#��\�@�?���?_Rs|�~�2��Fs�tI���^�y��ٕ�L��ʙ5�'|E&����=G +��:���v�F��\��t�� �E� ڟ�^#�Aj��b�K�=����7�:��(!�8�S�m˙_~��OP�h�"�p+]�$�Nƌ$�{�{�?:�:��-����V�����z��'N�8��)�a�'/cR���z�?�x����p���^�{���~�r�hĮ$6A$�/}��?��?����A^��*C���� H��з������y�j�#2�$_�#c�#�W$� s���5q҆e9P7 >0���3֭���l��ͤA��W��O;�Wb �� �e��U*��3/�ʢЫ_`��9N��A������M����h�I5���yf���w�y*��D�o"ց�����Z����"�N��X������s��\�)�. �y�y��0���D`��K�gK��*V��HR8��cr%l�����I$� ���I%}��_~�����ܒ�C��y���G ����0b����PYT��!��uԃӺӭ�u� x:���Ǜ+�'�+۞q�ԸW��7@� ��8��S�����;k$� ���Dn�ȄP�<?�AX���ϤE��-y���=�7�/���2"��F}4����9���(Qw�z9:�1�e�z�[�sn�cJ~��'�?��q-�C~�|lZT�:@/�u~{��&n��hk�EPw�@�6d�ֺ%]Kv�͇gp�xi��C��$��]�s �Mc�j�S�+���_�[6A�X��$n��ʮ�ܣ�ʌ���T7��GɌJ^�c�� o���(Կ)J��!݄�F���U~�������z䰹Ff>d �P�d�H��֞�n�+ �¸xF7.����s�GQ����x ��HX����O��纩�� ��G��Ǻ,ŭI[ƻ�� �5˾�MX�m�F�B�~���&�'Ï�z�ϔ�`�*�f� ���R��<�%'%�J��~���_[�q=��=XԊ���l����/3(��_�ތ�2�|������}�z#xg\V���2�G8hc���#��������):�����Ї�\m=�!2U�����ݓ=S����%I�%�=#�؟,q�Oس��V�oHj�����d�#�o�� #���n�oP�ڱYT�OH��l�_���(��Q�0#N!���,YP�gMx��*)���`8Dd���C+B�D81��E+2����M������G���c�UP_ -���8���J��J��'�幫9�u�C=����dvq4�OiZ\�K�Mb6�K����mM߽�\�#�s�K���D��[X+ �0�]�����y�េۤ>�<hWl��*M���^���Z�ÌS8���?�r�4*f�#�\G�^�*�{��yM"a��D�@(x�O�`k�1�?%cy�Y�����2����?��� #�Bx�Z���[��~�q+y:H<=W_T_�{����w�A����?��~���$��Jrp*!���1�-�#���}��9�uiQB���R!�P�j̣/������-�&�] � �܇����_�h|�u���������X�V%��#����~ʯHݕ:"�m��IV�ӡ��ѻR��p=~I$��d��ABS��%�� #������(�7'r��C��OS| �),��.����_*0��z���dd�'�/6���ų���sTKI;�c|0?V��E�AxW�$lJ�B�iXx}�B~'kh�>wU��W f�w��Gd$�$�9v�mm�r���Q�.=�{�`_j��M&x%��}�k��j�~2�0Z��r��:�'yn� �M<�ߎ��}�'@p�G���?����'�hJ�K�!EA�W�H���fjd�tGJ���M��r�����]F� &�μ���ED�1�+�⼩g�$�5�om�^��l���|��B%�D�Κ��v�Jҵ'�d��N��.ƱRű�h8^�-����I|��L�Y&�.'E�����W^�_w[ X܌�W�8p~ q+�z��W���y�x� }�O�T���v�Ov�Դϖ��3/���j�M��v��w�Ӣ�� Ǡb ���d�zWjO���6S�ގ_Xw�v��k�>�襁Uq+�������&�P��<��N�#�����s�cŠ4����5�B�N5�s�zw�6�.����d|Ι=��x3���&۲�^��N��Y/����!T�@��f�����V\��z�_F�#&���L���kr��w5�9V#^�~U�FF�T�T$��Ŷ?iw�c��ya#�l+�wے�[�?Q���Q��R&Y5p< j����4��[���|�˃V��F>E35q�D-8���q��`�: �~���R���X ��u>khv�)�P>m����uR����+�Fޞ��/�(/b?�O�=�ky��AF7�\O${�ў�*T�Ѭq��}����������|�����u{����)�X����:��J�@- �1���7�D����lk̯>P�/dL?� P7��/-������=����b)֫��w/�PW���u��Ҿn���s��Yg�u��x7�j�U6��>�~Ж��ª.�����v��$u ���_�6�-p����E^�Q8����=\��9���~�w�z�Bb��ţ��g�?�� .=7��{zՍ5'5y.�Z�Ó��p��/~���5�l���^mIÛ� ;I��% ���`�����H C1җ�[��+�~���ߝ�m�p�j����7� �qk��|<t%a�K�<E�mh�\�D�$p��e�,�#�ѱ�}���M��.$�n C� ������=~����>����R��_9��/�{N�U�I��]�W$v�?�6��R�����x� ��4���C5P$|�"
-
-
ZAP